Here is the scenario to replicate this issue:
- One dedicated server
- 2 Virtualmin Accounts (VM1, VM2)
- Both accounts have one database
- phpMyAdmin script was installed for both accounts
Now the interesting part.
If I am accessing https://VM1/phpmyadmin into my browser and use VM2 username and password I can get VM1 database only!
The same thing happens when accessing https://VM2/phpmyadmin and use VM1 username and password. I get VM2 database only!
Normally using VM1 username and password no matter of URL I should get the database for VM1 user. I opened a Terminal and access the database using both VM's accounts. I can use all databases without any issue for both accounts. I deleted both VM's, I created them again and I get the same issue. Is Virtualmin giving root access to these account to access any database available?